diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index 00937cdc3..7df5f165f 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -171,7 +171,7 @@ jobs:
   cabal:
     strategy:
       matrix:
-        ghc: ['9.6.7', '9.8.4']
+        ghc: ['9.6.7', '9.8.4', '9.10.3']
       fail-fast: false
     name: Cabal - Linux x86-64 - GHC ${{ matrix.ghc }}
     runs-on: ubuntu-24.04
diff --git a/cabal.project.freeze b/cabal.project.freeze
index 60d041545..026d4be91 100644
--- a/cabal.project.freeze
+++ b/cabal.project.freeze
@@ -1 +1 @@
-index-state: hackage.haskell.org 2025-10-29T04:02:18Z
+index-state: hackage.haskell.org 2026-04-18T18:42:36Z
diff --git a/postgrest.cabal b/postgrest.cabal
index 4ac179dcf..b355bff72 100644
--- a/postgrest.cabal
+++ b/postgrest.cabal
@@ -22,6 +22,7 @@ tested-with:
   , GHC == 9.6.7
     -- cabal on Ubuntu
   , GHC == 9.8.4
+    -- cabal on Ubuntu
     -- stack on FreeBSD, MacOS, Ubuntu, Windows
   , GHC == 9.10.3
 
@@ -112,6 +113,9 @@ library
                     , configurator-pg           >= 0.2.11 && < 0.3
                     , containers                >= 0.5.7 && < 0.8
                     , cookie                    >= 0.4.2 && < 0.6
+                    -- crypton 1.1.0 moved from `memory` to `ram`, which jose-jwt fails to build with right now.
+                    -- should be possible to remove this once jose-jwt had a new release.
+                    , crypton                   < 1.1.0
                     , directory                 >= 1.2.6 && < 1.4
                     , either                    >= 4.4.1 && < 5.1
                     , extra                     >= 1.7.0 && < 2.0